Emc Sourceone Email Supervisor vulnerabilities
4 vulnerabilities
Known vulnerabilities in Emc Sourceone Email Supervisor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-6846emcsourceone_email_supervisor
EPSS score1.07%
EMC SourceOne Email Supervisor before 7.2 uses hardcoded encryption keys, which makes it easier for attackers to obtain access by examining how a program's code conducts cryptographic operations.CVE-2015-6844emcsourceone_email_supervisorEPSS score2.31%
Cross-site scripting (XSS) vulnerability in Reviewer in EMC SourceOne Email Supervisor before 7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2015-6845emcsourceone_email_supervisorEPSS score3.46%
EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.CVE-2015-6843emcsourceone_email_supervisorEPSS score2.94%
Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it easier for remote attackers to obtain access via a brute-force approach.